TY - PAT T1 - Method and System for Detecting and Responding to Attacking Networks Y1 - 2008 A1 - Dagon,David A1 - Feamster, Nick A1 - Lee,Weake A1 - Edmonds,Robert A1 - Lipton,Richard A1 - Ramachandran,Anirudh ED - Damballa, Inc. AB - A system and method for detecting a first network of compromised computers in a second network of computers, comprising: collecting Domain Name System (DNS) data for the second network; examining the collected data relative to DNS data from known comprised and/or uncompromised computers in the second network; and determining the existence of the first network and/or the identity of compromised computers in the second network based on the examination. VL - 11/538,212 UR - http://www.google.com/patents?id=TYunAAAAEBAJ ER -